From 78143e1bf5525918026f354e837ee85f34235694 Mon Sep 17 00:00:00 2001 From: cad-safe-bot Date: Wed, 5 Nov 2025 13:01:38 +0000 Subject: [PATCH] Auto-Update: 2025-11-05T13:00:11.534976+00:00 --- CVE-2025/CVE-2025-117xx/CVE-2025-11745.json | 64 +++++++++++++++++++++ CVE-2025/CVE-2025-124xx/CVE-2025-12497.json | 60 +++++++++++++++++++ CVE-2025/CVE-2025-583xx/CVE-2025-58337.json | 8 ++- README.md | 20 +++---- _state.csv | 16 +++--- 5 files changed, 147 insertions(+), 21 deletions(-) create mode 100644 CVE-2025/CVE-2025-117xx/CVE-2025-11745.json create mode 100644 CVE-2025/CVE-2025-124xx/CVE-2025-12497.json diff --git a/CVE-2025/CVE-2025-117xx/CVE-2025-11745.json b/CVE-2025/CVE-2025-117xx/CVE-2025-11745.json new file mode 100644 index 00000000000..a128c18e5a1 --- /dev/null +++ b/CVE-2025/CVE-2025-117xx/CVE-2025-11745.json @@ -0,0 +1,64 @@ +{ + "id": "CVE-2025-11745", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-05T12:15:32.310", + "lastModified": "2025-11-05T12:15:32.310", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Ad Inserter \u2013 Ad Manager & AdSense Ads plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom field through the plugin's 'adinserter' shortcode in all versions up to, and including, 2.8.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N", + "baseScore": 6.4, + "baseSeverity": "MEDIUM", + "attackVector": "NETWORK", + "attackComplexity": "LOW", + "privilegesRequired": "LOW", + "userInteraction": "NONE", + "scope": "CHANGED", + "confidentialityImpact": "LOW", + "integrityImpact": "LOW", + "availabilityImpact": "NONE" + }, + "exploitabilityScore": 3.1, + "impactScore": 2.7 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-80" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.7/ad-inserter.php#L9333", + "source": "security@wordfence.com" + }, + { + "url": "https://plugins.trac.wordpress.org/browser/ad-inserter/tags/2.8.7/ad-inserter.php#L9870", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/8e7831c5-2262-42c9-9655-a43ef2dac54f?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-124xx/CVE-2025-12497.json b/CVE-2025/CVE-2025-124xx/CVE-2025-12497.json new file mode 100644 index 00000000000..952006c8c23 --- /dev/null +++ b/CVE-2025/CVE-2025-124xx/CVE-2025-12497.json @@ -0,0 +1,60 @@ +{ + "id": "CVE-2025-12497", + "sourceIdentifier": "security@wordfence.com", + "published": "2025-11-05T12:15:33.347", + "lastModified": "2025-11-05T12:15:33.347", + "vulnStatus": "Received", + "cveTags": [], + "descriptions": [ + { + "lang": "en", + "value": "The Premium Portfolio Features for Phlox theme plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.3.10 via the 'args[extra_template_path]' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary .php files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where .php file types can be uploaded and included." + } + ], + "metrics": { + "cvssMetricV31": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "cvssData": { + "version": "3.1", + "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", + "baseScore": 8.1, + "baseSeverity": "HIGH", + "attackVector": "NETWORK", + "attackComplexity": "HIGH", + "privilegesRequired": "NONE", + "userInteraction": "NONE", + "scope": "UNCHANGED", + "confidentialityImpact": "HIGH", + "integrityImpact": "HIGH", + "availabilityImpact": "HIGH" + }, + "exploitabilityScore": 2.2, + "impactScore": 5.9 + } + ] + }, + "weaknesses": [ + { + "source": "security@wordfence.com", + "type": "Primary", + "description": [ + { + "lang": "en", + "value": "CWE-98" + } + ] + } + ], + "references": [ + { + "url": "https://plugins.trac.wordpress.org/changeset/3388727/auxin-portfolio", + "source": "security@wordfence.com" + }, + { + "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/518abad2-d3cc-4d15-83d2-8fd99d30500c?source=cve", + "source": "security@wordfence.com" + } + ] +} \ No newline at end of file diff --git a/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json b/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json index 179064ab915..56155b67e89 100644 --- a/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json +++ b/CVE-2025/CVE-2025-583xx/CVE-2025-58337.json @@ -2,7 +2,7 @@ "id": "CVE-2025-58337", "sourceIdentifier": "security@apache.org", "published": "2025-11-05T10:15:36.483", - "lastModified": "2025-11-05T10:15:36.483", + "lastModified": "2025-11-05T11:15:35.070", "vulnStatus": "Received", "cveTags": [], "descriptions": [ @@ -15,7 +15,7 @@ "weaknesses": [ { "source": "security@apache.org", - "type": "Primary", + "type": "Secondary", "description": [ { "lang": "en", @@ -28,6 +28,10 @@ { "url": "https://lists.apache.org/thread/6tswlphj0pqn9zf25594r3c1vzvfj40h", "source": "security@apache.org" + }, + { + "url": "http://www.openwall.com/lists/oss-security/2025/11/04/5", + "source": "af854a3a-2127-422b-91ae-364da2661108" } ] } \ No newline at end of file diff --git a/README.md b/README.md index 38feb1a631d..584f30953ee 100644 --- a/README.md +++ b/README.md @@ -13,13 +13,13 @@ Repository synchronizes with the NVD every 2 hours. ### Last Repository Update ```plain -2025-11-05T11:00:13.206306+00:00 +2025-11-05T13:00:11.534976+00:00 ``` ### Most recent CVE Modification Timestamp synchronized with NVD ```plain -2025-11-05T10:15:36.483000+00:00 +2025-11-05T12:15:33.347000+00:00 ``` ### Last Data Feed Release @@ -33,26 +33,22 @@ Download and Changelog: [Click](https://github.com/fkie-cad/nvd-json-data-feeds/ ### Total Number of included CVEs ```plain -113166 +113168 ``` ### CVEs added in the last Commit -Recently added CVEs: `7` +Recently added CVEs: `2` -- [CVE-2025-11820](CVE-2025/CVE-2025-118xx/CVE-2025-11820.json) (`2025-11-05T10:15:34.357`) -- [CVE-2025-11987](CVE-2025/CVE-2025-119xx/CVE-2025-11987.json) (`2025-11-05T10:15:34.637`) -- [CVE-2025-12192](CVE-2025/CVE-2025-121xx/CVE-2025-12192.json) (`2025-11-05T10:15:35.217`) -- [CVE-2025-12468](CVE-2025/CVE-2025-124xx/CVE-2025-12468.json) (`2025-11-05T10:15:35.463`) -- [CVE-2025-12469](CVE-2025/CVE-2025-124xx/CVE-2025-12469.json) (`2025-11-05T10:15:35.933`) -- [CVE-2025-55108](CVE-2025/CVE-2025-551xx/CVE-2025-55108.json) (`2025-11-05T09:15:32.170`) -- [CVE-2025-58337](CVE-2025/CVE-2025-583xx/CVE-2025-58337.json) (`2025-11-05T10:15:36.483`) +- [CVE-2025-11745](CVE-2025/CVE-2025-117xx/CVE-2025-11745.json) (`2025-11-05T12:15:32.310`) +- [CVE-2025-12497](CVE-2025/CVE-2025-124xx/CVE-2025-12497.json) (`2025-11-05T12:15:33.347`) ### CVEs modified in the last Commit -Recently modified CVEs: `0` +Recently modified CVEs: `1` +- [CVE-2025-58337](CVE-2025/CVE-2025-583xx/CVE-2025-58337.json) (`2025-11-05T11:15:35.070`) ## Download and Usage diff --git a/_state.csv b/_state.csv index 7531d6ee88d..1caf9887e07 100644 --- a/_state.csv +++ b/_state.csv @@ -110357,6 +110357,7 @@ CVE-2025-11715,0,0,a00abc5965b63a6e96c235bd40798971318f616fdfc13cb871eee248c63a8 CVE-2025-11724,0,0,e21e22fcbe5b23aebd7f132521524f56247c3b33e9dacbcad753407c1bf246d8,2025-11-04T15:40:45.533000 CVE-2025-11733,0,0,da0d0f0066ecf8dde131c963b52751f600194cc54d072af2098f5b1257bcec41,2025-11-04T15:40:45.533000 CVE-2025-11740,0,0,554f756253f28462b6fdb3be4a37f2cd36ff0a6aebe359f4656827486fcb4792,2025-11-04T15:41:31.450000 +CVE-2025-11745,1,1,710c68ef199adddbbf65d3cc48f526bd005d779eb0c6393f7ca99f1cc455e363,2025-11-05T12:15:32.310000 CVE-2025-11749,0,0,47205673f609536e21dfc8307ea29a918ede29cf273ef5f0cd25a2661081b092,2025-11-05T06:15:33.097000 CVE-2025-11753,0,0,efb2fc3659d0a1d464df056937c66b22958ad3eb0a440f727e5abc0c791d0288,2025-11-04T15:40:45.533000 CVE-2025-11755,0,0,e5baa99e43a4ddc9310a3a7b11a9886eb0253e6d3147e723d3be66ed08104da1,2025-11-04T15:41:31.450000 @@ -110365,7 +110366,7 @@ CVE-2025-11761,0,0,f6e39bd9482657942879edd0b2a1b17b4e754913cb6b1c42f5608d25f9fcf CVE-2025-11806,0,0,08d65701390e43b2f7f03f89f91aab6f7e850ca93ddff0ab1e6d4bedda40a405,2025-11-04T15:41:56.843000 CVE-2025-11812,0,0,0ea65f3f43245914cd444094e396174bf98128b4d4282ef36ff5b4b6e2586635,2025-11-04T15:40:45.533000 CVE-2025-11816,0,0,077829218cdb7ffdac212283c82fe34fd19a8424717ab204964a76afb5e6f155,2025-11-04T15:41:31.450000 -CVE-2025-11820,1,1,b896d7147871add9fbc3d811d9fefa9a45ba34466a1a1c8df63cacc6709f5153,2025-11-05T10:15:34.357000 +CVE-2025-11820,0,0,b896d7147871add9fbc3d811d9fefa9a45ba34466a1a1c8df63cacc6709f5153,2025-11-05T10:15:34.357000 CVE-2025-11833,0,0,38d333ce24d3dbfeec0bd4ae779deaa8ef0948f53b42301de8d2223d3f539d74,2025-11-04T15:41:31.450000 CVE-2025-11835,0,0,e57e70dcea7a5c4416d0202413090d105f030ab379f21e026207f32363cc06c9,2025-11-05T04:15:32.063000 CVE-2025-11841,0,0,dbee2e063bbcc85c3b02b609a7b7857238885fb901dea54195b9cf109bbbc6f8,2025-11-04T15:40:45.533000 @@ -110379,7 +110380,7 @@ CVE-2025-11928,0,0,039850d5a9bc831f6682f232b969212d628a83fc99a6973f6f68f85e98ecf CVE-2025-11953,0,0,33887f10e19c1b4c80cf06c1647be8ba0505c37ba88a836d4ed00fd835342b82,2025-11-04T15:41:31.450000 CVE-2025-11975,0,0,f8baf4e03f21eb7011816c7fc780260c38e1f2294811f052de423c64ae07c8f7,2025-11-04T15:41:56.843000 CVE-2025-11983,0,0,bc7fb32e029694302396f8cd3f019a19b9640e3f29521eb8cdc75f2a72adc751,2025-11-04T15:41:31.450000 -CVE-2025-11987,1,1,2407d205474337efb23784a91023257c7a6e9395b3f4e8a87e19686e7073d228,2025-11-05T10:15:34.637000 +CVE-2025-11987,0,0,2407d205474337efb23784a91023257c7a6e9395b3f4e8a87e19686e7073d228,2025-11-05T10:15:34.637000 CVE-2025-11995,0,0,6f8958ce899f0704a85806bb10326db23bb70663c3cd48669a3dcf953846ff97,2025-11-04T15:41:31.450000 CVE-2025-11998,0,0,cc4ee38171b43db578c92dfe8077240d6a33ecae0069eac25ccf4b6743123739,2025-11-04T15:41:56.843000 CVE-2025-12038,0,0,5e68deca7bb2d572b14281f601c9046d7f4e12cddc4a86070cd881007401f674,2025-11-04T15:41:31.450000 @@ -110407,7 +110408,7 @@ CVE-2025-12180,0,0,706ded67723279ae679ea8a333580d98de93133f559c2ae245f3cd4a4afbf CVE-2025-12184,0,0,be752abd2f1d114dc84a062fb352b4536431571405a4ab3177e8747475735a18,2025-11-04T15:40:45.533000 CVE-2025-12188,0,0,c70c576d01c11e9642af5bd77fd654a069b0b8a99cd2533cd3d2105c232bfe3c,2025-11-04T15:40:45.533000 CVE-2025-1219,0,0,6f1f69e2faa6be38034464fa71871f25135a0aebe53cdc3879b7977b8e22919e,2025-11-03T21:18:52.480000 -CVE-2025-12192,1,1,64bf7869c8f585f39487da4e899ab3de4b02085250bee905671b052b61a7033e,2025-11-05T10:15:35.217000 +CVE-2025-12192,0,0,64bf7869c8f585f39487da4e899ab3de4b02085250bee905671b052b61a7033e,2025-11-05T10:15:35.217000 CVE-2025-12197,0,0,ba4f981e056afd05ca2468ab9da420cbe42b97aeff55f6e0164adc0f415081c1,2025-11-05T05:15:51.590000 CVE-2025-12198,0,0,6ea9c10951845568187e7b03e0665963ca80f2cadbcc5c7c5766ce0d3b72e494,2025-11-03T23:17:36.100000 CVE-2025-12199,0,0,0a7a4b2087dab3ff7f2d6958d8896d7d790fe89d2352f3a5a155a377b72eb0eb,2025-11-03T23:17:36.210000 @@ -110472,9 +110473,10 @@ CVE-2025-12456,0,0,14eee47b68d992143ad17e685afafe2ffbf679d13bdb1d15aee71f9bca67a CVE-2025-12460,0,0,8d84da839024222a89d75799d9a157b3b600ff51d3c5cd78bc45fe409894ef06,2025-11-04T15:41:31.450000 CVE-2025-12463,0,0,23987d4654f8034e3df2c9af7f95dd71ff0f6cb55ca0f437aa71e6f9a1a80f12,2025-11-04T15:41:31.450000 CVE-2025-12464,0,0,b46fa64dfa8982985a4b0c97363287615507209fa18d74a17a9cc2d8dfc824d5,2025-11-04T15:41:31.450000 -CVE-2025-12468,1,1,c39248f993b398f7c4c00c7b7f68f6da2c823b4f5cc665b7dc0b1b33be6d0b96,2025-11-05T10:15:35.463000 -CVE-2025-12469,1,1,27154e6f10bf2173b15465b0a9485af61de4ec4b5ac00a91f6c8213b09fd60a9,2025-11-05T10:15:35.933000 +CVE-2025-12468,0,0,c39248f993b398f7c4c00c7b7f68f6da2c823b4f5cc665b7dc0b1b33be6d0b96,2025-11-05T10:15:35.463000 +CVE-2025-12469,0,0,27154e6f10bf2173b15465b0a9485af61de4ec4b5ac00a91f6c8213b09fd60a9,2025-11-05T10:15:35.933000 CVE-2025-12493,0,0,afa6849609808be1f20c2a6526313c6aca9571ed2a54395ad594ae38296a91aa,2025-11-04T15:40:45.533000 +CVE-2025-12497,1,1,0fa65c505d8ebbe9bfd12638de06b38b5738ee8cf9fe033f3c4c1da6a07fe85d,2025-11-05T12:15:33.347000 CVE-2025-12501,0,0,4045381515e6057e94a39334f3f87bc03a4fd6f54306916fa2dc0af2df20d075,2025-11-04T15:41:31.450000 CVE-2025-12503,0,0,85603a997af78bf4281099ba8202363620cebbb02ffe8183fb56c0311b7c3823,2025-11-04T15:41:31.450000 CVE-2025-12507,0,0,b7275a816f751af82d2a9bdedf7ffebe34ad5315f135e4b30532eafb79d20a35,2025-11-04T15:41:31.450000 @@ -112781,7 +112783,7 @@ CVE-2025-54989,0,0,ad23a3888b3fae3cfde1b8851ca6aac11359cd4f79f8e44343c31b24ee26e CVE-2025-54995,0,0,5f441fc347dc0a9e8a2ab9b073349a7ea4680529dfd8ad442bbdd456ed1ea5a8,2025-11-03T18:17:00.357000 CVE-2025-55014,0,0,b7cd39bf17a2d8cee4a9350c52a590bcf5672db5e59832b95741ce0ee996441a,2025-11-04T22:16:30.023000 CVE-2025-55039,0,0,52b2783eeaf97d09c0478ecb1d667c09e1513742c72df2a4d87b4c4aae1bc958,2025-11-04T22:16:30.140000 -CVE-2025-55108,1,1,0478bb1a3a1a0ccd3ee1f939bb3d807cbe51840f3be16116f8a76a1604ac0eee,2025-11-05T09:15:32.170000 +CVE-2025-55108,0,0,0478bb1a3a1a0ccd3ee1f939bb3d807cbe51840f3be16116f8a76a1604ac0eee,2025-11-05T09:15:32.170000 CVE-2025-55154,0,0,237787aebfbf147c52094e9b53e45bed0ca96caaf177c4ca7b5c5771f14abaf2,2025-11-03T19:16:12.043000 CVE-2025-55155,0,0,7df2daf5c10fab30abf08c000b8b92037bab3dc74d13499f9c54548e164d5ba0,2025-11-04T21:15:39.280000 CVE-2025-55163,0,0,e2f9bf96949e7f6c3bdc75bfbc4f75249069494b689049b49a4e17c3ab58cf1c,2025-11-04T22:16:30.293000 @@ -112827,7 +112829,7 @@ CVE-2025-58186,0,0,66f91eca7419b275d606ab7bd9ec4846ab5addd132a073e636085fe46a43c CVE-2025-58187,0,0,432caffab1feb251779cc8d51b70d119e9975cb99ca82f6e7cf5538d6476ea99,2025-11-04T22:16:33.593000 CVE-2025-58188,0,0,3d50778dde8918d5d63cadfa2b34921a5a9df3314a5e646189b9710bff6b6cc6,2025-11-04T22:16:33.740000 CVE-2025-58189,0,0,b7b31dfd5f6a0c38020f90a11349b1d9404dd0074567c6572a52cd0e4e02fac3,2025-11-04T22:16:33.877000 -CVE-2025-58337,1,1,dbff2b588becbfedf2733e11f3d933befea2a4c72ca6951cdac0b00cec3357e3,2025-11-05T10:15:36.483000 +CVE-2025-58337,0,1,00aa85897d5dcbdbec12fee848075bd598881339725586f7a239f1efa6040a0f,2025-11-05T11:15:35.070000 CVE-2025-58364,0,0,fb144b87e40584e5e0120380d60198a2b456e69db599f0331e5ffa6089d809a6,2025-11-04T22:16:34.003000 CVE-2025-58438,0,0,4f70e2857129179345e235a9b918a01ff13e124f81996d12187c07edc207d5cc,2025-11-03T19:16:14.203000 CVE-2025-58457,0,0,c45c4ccccc70b6710e1cc7394d0f4f590a1e9a16d473495f50ad68d5b0239022,2025-11-04T22:16:34.103000